Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3231352e302f32342d3234203d3e203138333435.roa
File:                     3138312e3231342e3231352e302f32342d3234203d3e203138333435.roa (raw, json)
Hash identifier:          /+gFHBJBVvJYsyeBHJHNjfmI9o99915g7IfW0sG31Cg=
Subject key identifier:   FA:A0:F9:17:74:F2:E5:6F:41:B0:11:32:A4:1B:DC:58:0B:A7:DB:96
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       21940CDC766DD1E1E162C94AAF471F0B3937C316
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3231352e302f32342d3234203d3e203138333435.roa
Signing time:             Thu 03 Mar 2022 13:12:50 +0000
ROA not before:           Thu 03 Mar 2022 13:07:50 +0000
ROA not after:            Thu 02 Mar 2023 13:12:50 +0000
asID:                     18345
IP address blocks:        181.214.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:94:0c:dc:76:6d:d1:e1:e1:62:c9:4a:af:47:1f:0b:39:37:c3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  3 13:07:50 2022 GMT
            Not After : Mar  2 13:12:50 2023 GMT
        Subject: CN=3082010A0282010100CE8573B8113414CEE72CBD4AC0A7480F2005037BE03BB764BF555D691FD4BA1C0D73B5BCA5A912BB997186D1E7840E25C886C12CED5FDE80D19E45A3290C914B92292E9BB44232A734FEC1094973820754FA698C63FA656E586A2AC71EA6B4988939F2EC1A94DCBF67BEE2331DDAF66CFCFDB09529B4AE85E00F8039F8F8423EFBAD0F05753E432CE70D174984373D2AF4CE0FC4464B2E72C32D5F9B6A33A645548FAA6FE532B67AF8A0E873B093BF2B0B44F8CDF9DCBFBCF729F492A6F93280956EC346C2ABF78BFFB45E759B08C9B25641AFD9859025C16042A4FC4EF1D50142AE9F80C84933E7159C710DD32A430580491CCFAC2356394F7A8E2AD75E14830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:73:b8:11:34:14:ce:e7:2c:bd:4a:c0:a7:
                    48:0f:20:05:03:7b:e0:3b:b7:64:bf:55:5d:69:1f:
                    d4:ba:1c:0d:73:b5:bc:a5:a9:12:bb:99:71:86:d1:
                    e7:84:0e:25:c8:86:c1:2c:ed:5f:de:80:d1:9e:45:
                    a3:29:0c:91:4b:92:29:2e:9b:b4:42:32:a7:34:fe:
                    c1:09:49:73:82:07:54:fa:69:8c:63:fa:65:6e:58:
                    6a:2a:c7:1e:a6:b4:98:89:39:f2:ec:1a:94:dc:bf:
                    67:be:e2:33:1d:da:f6:6c:fc:fd:b0:95:29:b4:ae:
                    85:e0:0f:80:39:f8:f8:42:3e:fb:ad:0f:05:75:3e:
                    43:2c:e7:0d:17:49:84:37:3d:2a:f4:ce:0f:c4:46:
                    4b:2e:72:c3:2d:5f:9b:6a:33:a6:45:54:8f:aa:6f:
                    e5:32:b6:7a:f8:a0:e8:73:b0:93:bf:2b:0b:44:f8:
                    cd:f9:dc:bf:bc:f7:29:f4:92:a6:f9:32:80:95:6e:
                    c3:46:c2:ab:f7:8b:ff:b4:5e:75:9b:08:c9:b2:56:
                    41:af:d9:85:90:25:c1:60:42:a4:fc:4e:f1:d5:01:
                    42:ae:9f:80:c8:49:33:e7:15:9c:71:0d:d3:2a:43:
                    05:80:49:1c:cf:ac:23:56:39:4f:7a:8e:2a:d7:5e:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A0:F9:17:74:F2:E5:6F:41:B0:11:32:A4:1B:DC:58:0B:A7:DB:96
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/3138312e3231342e3231352e302f32342d3234203d3e203138333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:0c:11:84:8e:c1:bf:3e:57:8b:df:92:c8:73:68:21:5e:71:
         fe:75:1b:d7:43:85:0b:e7:82:64:05:b4:cb:c4:be:f4:19:be:
         43:45:53:90:22:a9:61:05:d0:67:56:df:57:5a:47:6c:a2:78:
         0a:ee:e9:b1:80:6b:4c:4a:eb:dc:5d:f6:d4:79:61:29:e8:f4:
         1e:65:49:0f:13:30:ed:2c:91:9b:bb:09:d9:52:88:6f:f6:de:
         75:90:9b:11:2e:ec:4c:7b:6a:94:ef:5c:b2:eb:52:76:d7:0d:
         85:16:25:72:96:e2:8e:41:19:08:83:1b:99:03:27:86:fe:18:
         1f:72:00:fe:2c:62:ba:1f:64:2a:d4:5e:4a:dc:2c:57:58:06:
         40:db:ae:25:cc:18:12:d0:13:2f:77:af:c0:34:cc:1f:1d:22:
         19:d6:12:03:8a:1a:17:39:19:36:5e:1d:67:58:de:05:f5:53:
         bf:72:c2:5b:8a:a2:59:63:63:11:a6:ca:c6:48:51:78:f6:7e:
         c6:33:05:e9:55:5e:9c:41:59:64:8a:60:bc:7c:e7:6c:36:52:
         95:bb:58:47:2d:6a:4b:0f:74:ce:08:4e:6e:1a:5d:a8:72:b9:
         ab:5c:46:98:2e:e2:ab:c1:d1:15:d6:a1:9c:68:21:a7:be:62:
         0c:ac:92:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org